rlSecuritySuiteDenyNetMask 1.3.6.1.4.1.9.6.1.101.120.8.1.4

Relevant when rlSecuritySuiteDenyTCPRangeType equals mask(1). Specify the number of bits that comprise the destination IP address prefix.